Codebase list unbound / scrub-obsolete/main testdata / subnet_not_whitelisted.crpl
scrub-obsolete/main

Tree @scrub-obsolete/main (Download .tar.gz)

subnet_not_whitelisted.crpl @scrub-obsolete/main — raw · history · blame 

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
server:
	send-client-subnet: 9.9.9.9/32
	client-subnet-opcode: 20730
	max-client-subnet-ipv4: 21
	verbosity: 3
	module-config: "subnetcache validator iterator"
	qname-minimisation: "no"

stub-zone:
	name: "."
	stub-addr: 193.0.14.129 	# K.ROOT-SERVERS.NET.
CONFIG_END

SCENARIO_BEGIN Subnet option MUST NOT be send to any host

RANGE_BEGIN 0 100

	ADDRESS 193.0.14.129 

	ENTRY_BEGIN
		MATCH opcode qtype qname ednsdata
		ADJUST copy_id
		REPLY QR NOERROR
		SECTION QUESTION
			. IN NS
		SECTION ANSWER
			. IN NS	K.ROOT-SERVERS.NET.
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
			K.ROOT-SERVERS.NET.	IN	A	193.0.14.129
	ENTRY_END

	ENTRY_BEGIN
		MATCH opcode qtype qname ednsdata
		ADJUST copy_id
		REPLY QR NOERROR
		SECTION QUESTION
			a.gtld-servers.net. IN AAAA
		SECTION AUTHORITY
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
	ENTRY_END

	ENTRY_BEGIN
		MATCH opcode qtype qname ednsdata
		ADJUST copy_id
		REPLY QR NOERROR
		SECTION QUESTION
			www.example.com. IN A
		SECTION AUTHORITY
			com.	IN NS	a.gtld-servers.net.
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
			a.gtld-servers.net.	IN 	A	192.5.6.30
	ENTRY_END
	
RANGE_END

RANGE_BEGIN 0 100

	ADDRESS 192.5.6.30

	ENTRY_BEGIN
		MATCH opcode subdomain ednsdata
		ADJUST copy_id copy_query
		REPLY QR NOERROR
		SECTION QUESTION
			example.com. IN A
		SECTION AUTHORITY
			example.com.	IN NS	ns.example.com.
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
			ns.example.com.		IN 	A	5.0.15.10
	ENTRY_END
	
RANGE_END

RANGE_BEGIN 0 100

	ADDRESS 5.0.15.10

	ENTRY_BEGIN
		MATCH opcode qtype qname ednsdata
		ADJUST copy_id
		REPLY QR NOERROR
		SECTION QUESTION
			example.com. IN NS
		SECTION ANSWER
			example.com.    IN NS   ns.example.com.
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
			ns.example.com.     IN      A       5.0.15.10
	ENTRY_END

	ENTRY_BEGIN
		MATCH opcode qtype qname ednsdata
		ADJUST copy_id
		REPLY QR NOERROR
		SECTION QUESTION
			ns.example.com. IN AAAA
		SECTION ANSWER
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
	ENTRY_END

	ENTRY_BEGIN
		MATCH opcode subdomain ednsdata
		ADJUST copy_id copy_query
		REPLY QR NOERROR
		SECTION QUESTION
			www.example.com. IN A
		SECTION ANSWER
			www.example.com.	IN A	4.3.2.1
		SECTION ADDITIONAL
			HEX_EDNSDATA_BEGIN
				;; we expect to receive empty
			HEX_EDNSDATA_END
	ENTRY_END
	
RANGE_END

;; ----------------------------------------

STEP 1 QUERY

	ENTRY_BEGIN
		REPLY RD
		SECTION QUESTION
		www.example.com. IN A
	ENTRY_END

STEP 10 CHECK_ANSWER

	ENTRY_BEGIN
		MATCH all
		REPLY QR RD RA NOERROR
		SECTION QUESTION
			www.example.com. IN A
		SECTION ANSWER
			www.example.com.	IN A	4.3.2.1
		SECTION AUTHORITY
		SECTION ADDITIONAL
	ENTRY_END

SCENARIO_END